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AMENDMENTS TO CLAIMS 



1. (Original) A method for producing at least one ciphertext block 
from at least one plaintext block using a block cipher E and a key the method 
comprising: 

receiving n plaintext blocks, wherein n is an integer greater than 0; 

setting Qo equal to an initial value; and 

for each plaintext block of the n plaintext blocks: 

computing Qi = EK(Qi-l) XOR Pi ; and 

computing C/ = M^(Pi , Qi) , 

thereby producing n ciphertext blocks, 
wherein: 

0 < i <= n, and 

Pi denotes an i - th plaintext block of the n plaintext blocks, and 
Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 
Af is a selector function which, for each bit Cij of block C/, 

selects a first argument of M if bit Pij is not to be encrypted, and selects a second 

argument of M if bit Pij is to be encrypted. 

2. (Original) The method according to claim 1 and wherein M is 
chosen in accordance with a standard indicating bits that are not to be encrypted. 

3. (Original) The method according to claim 2 and wherein the 
standard comprises one of the following: an audio standard; a video standard; and 
an audio- video standard. 
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4. (Original) The method according to claim 3 and wherein the 
standard comprises MPEG-2. 

5. (Original) A method for producing at least one ciphertext block 
from at least one plaintext block using a block cipher E and a key K, the method 
comprising: 

receiving n plaintext blocks, wherein n is an integer greater than 0, 
and an initial value /F; 

computing IV' = M(Pj JV) ; 

. computing ^ H(IV ) ; and - / 

for each plaintext block of the n plaintext blocks: 

computing Qi = EK(Qi-l) XOR Pi ; and 

computing = (!P/ , Qj) , 

thereby producing n ciphertext blocks, 
wherein: 

0 < i <= n, and 

if is a hash function, and 

Pi denotes an i - th plaintext block of the n plaintext blocks, and 
Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cy of block Cp 

selects a first argument of Af if bit Py is not to be encrypted, and selects a second 

argument of M if bit Py is to be encrypted. 

6. (Original) The method according to claim 5 and wherein H 

comprises SHAl. 
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7. (Original) The method according to claim 5 and wherein 
H(IV') comprises Ek(IV') XOR IV \ 

8. (Currently Amended) The method according to any of claims 
% — 7 claim 5 and wherein M is chosen in accordance with a standard indicating 

' bits that are not to be encrypted. 

9. (Original) The method according to claim 8 and wherein the 
standard comprises one of the following: an audio standard; a video standard; and 
an audio- video standard. 

10. (Original) The method according to claim 9 and wherein the 
standard comprises MPEG-2. 

11. (Original) In a method for producing at least one ciphertext 
block from at least one plaintext block using a block cipher E and a key A" in a 

stream mode, wherein Pf denotes an i - th plaintext block, and C/ denotes an i - 

th ciphertext block, an improvement comprising: 

for each bit Cy of block Cf, selecting Py as an output if hit Py 

is not to be encrypted. 

12. (Original) The method according to claim 11 and wherein the 
stream mode comprises CFM mode. 

13 . (Original) Apparatus for producing at least one ciphertext block 

from at least one plaintext block using a block cipher E and a key the at least 
one plaintext block comprising n plaintext blocks, the at least one ciphertext block 
comprising n ciphertext blocks, wherein n is an integer greater than 0, the 
apparatus comprising: 

an initialization unit for setting Qq equal to an initial value; and 
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a computation unit operative, for each plaintext block of the n 
plaintext blocks: 

to compute Qf — Ef^(Qi^j) XOR Pi ; and 
to compute Cf. — M(Pi , Qj) , 

wherein: 

0 < i <= n, and 

Pi denotes an i - th plaintext block of the n plaintext blocks, and 
Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cy of block C/, 

selects a first argument of M if bit Py is not to be encrypted, and selects a second 

argument of M if bit Pij is to be encrypted. 

14. (Original) Apparatus for producing at least one ciphertext block 

from at least one plaintext block using a block cipher E, a key AT, and an initial 
value /F, the at least one plaintext block comprising n plaintext blocks, the at least 
one ciphertext block comprising n ciphertext blocks, wherein n is an integer 
greater than 0, the apparatus comprising: 

a first computation imit for computing IV' = M(PiJV) ; 

a second computation unit for computing Qq — : and 

a third computation unit operative, for each plaintext block of the n 
plaintext blocks: 

to compute Qi — Ek( Qi-l) XOR Pi ; and 
to compute C/ = M(P i , Qj) , 

wherein: 

0 < i <= n, and 

if is a hash function, and 
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Pf denotes an i - th plaintext block of the n plaintext blocks, and 
Cf denotes an i - th ciphertext block of the n ciphertext blocks, and 
Af is a selector function which, for each bit Cy of block- Cp 

selects a first argument of M if bit Py is not to be encrypted, and selects a second 

argument of M if bit Py is to be encrypted. 

15. (Original) In apparatus for producing at least one ciphertext 
block from at least one plaintext block using a block cipher E and a key^ iST- in- a"- 

stream mode, wherein Pf denotes an i - th plaintext block, and denotes an i - 

th ciphertext block, an improvement comprising: 

a selector unit operative, for each bit Cy of block c, to select rij 

as an output if bit Py is not to be encrypted. 

16. (Original) A method for producing at least one plaintext block 
from at least one ciphertext block encrypted using a block cipher E and a key 
the method comprising: 

receiving n ciphertext blocks, where n is an integer greater than 0; 

setting Qo equal to an initial value; and 
. for each ciphertext block of the n ciphertext blocks: 

computing Q 'i = Ek( Qi-l) XOR Cf ; 

computing jP/ — M( Cj , Q'j) \ and 

computing Qi —M(Q 'i , C^) , 

tiiereby producing n plaintext blocks, 
wherein: 

0 <i <= n, and 
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Pi denotes an i - th plaintext block of the n plaintext blocks, and 
Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 
Af is a selector function which, for each bit Cy of block Cp 

selects a first argument of M if bit Py is not encrypted, and selects a second 

argument of M if bit Py is encrypted. 

17. (Original) The method according to claim 16 and wherein M is 
chosen in accordance with a standard indicating bits that are not encryptedr * ' • ^-^^ 

18. (Original) The method according to claim 17 and wherein the 
standard comprises one of the following: an audio standard; a video standard; and 
an audio-video standard. 

19. (Original) The method according to claim 18 and wherein the 
standard comprises MPEG-2. 

20. (Original) A method for producing at least one plaintext block 
firom at least one ciphertext block using a block cipher E aiid a key the method 
comprising: 

receiving n ciphertext blocks, wherein h is an integer greater than 0, 
and an initial value IV\ 

computing IV' =M(PiJV), 

computing Qq — H(IV ) ; and 

for each ciphertext block of the n ciphertext blocks: 

computing Q 'i = Ek( Qi l) XOR Cf ; 

computing Pj — M( C/ , Q ^ j) \ and 
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computing Qi —M(Q \ , Cj) , 

thereby producing n plaintext blocks, 
wherein: 

0 < i <= n, and 

if is a hash function, and 

Pi denotes an i - th plaintext block of the n plaintext blocks, and 
Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cy of block C/, 

selects a first argument of M if bit Py is not encrypted, and selects a second 

argument of M if bit Py is encrypted. 

21. (Original) The method according to claim 20 and wherein H 
comprises SHAl. 

22. (Original) The method according to claim 20 and wherein 
H(IV') comprises Ek(IV')XORIV\ 

23: (Currently Amended) The method according to any of claims 

30 — 2 2claim 20 and wherein M is chosen in accordance with a standard indicating 
bits that are not encrypted. 

24. (Original) The method according to claim 23 and wherein the 
standard comprises one of the following: an audio standard; a video standard; and 
an audio-video standard. 

25. (Original) The method according to claim 24 and wherein the 
standard comprises MPEG-2. 
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26. (Original) In a method for producing at least one plaintext block 
from at least one ciphertext block using a block cipher E and a key in a stream 

mode, wherein jP/ denotes an i - th plaintext block of the plurality of plaintext 

blocks, and C/ denotes an i - th ciphertext block of the plurality of ciphertext 
blocks, an improvement comprising: 

for each bit Py of block , selecting Cy as an output if bit Cy 
is not encrypted. 

27. (Original) The method according to claim 26 and wherein the 
stream mode comprises CFM mode. 

28. (Original) Apparatus for producing at least one plaintext block 
from at least one ciphertext block encrypted using a block cipher E and a key AT, 
the at least one ciphertext block comprising n ciphertext blocks, the at least one 
plaintext block comprising n plaintext blocks, wherein n is an integer greater than 
0, the apparatus comprising: 

initialization apparatus for setting Qq equal to an initial value; and 

a computation unit operative, for each ciphertext block of the n 
ciphertext blocks: 

to compute Q =^ '^K(Qi'l) Ci I 

to compute Pi —■ M( Cf , Q 'i) ; and 
to compute Qi Q 'i , , 

wherein: 

0 < i <= n, and 

Pi denotes an i - th plaintext block of the n plaintext blocks, and 
Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 
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Af is a selector fiinction which, for each bit Cy of block C/, 
selects a first argument of M if bit Py is not encrypted, and selects a second 
argument of M if bit Py is encrypted. 

29. (Original) Apparatus for producing at least one plaintext block 
from at least one ciphertext block using a block cipher E and a key the at least 
one ciphertext block comprising n ciphertext blocks, the at least one plaintext 
block comprising n plaintext blocks, wherein n is an integer greater than 0, the 
apparatus comprising: 

a first computation imit for computing IV' = M(Pi JV) ; 

a second computation unit for computing Qq — H(IV ) ; and 

a third computation unit operative, for each ciphertext block of the n 
ciphertext blocks: 

to compute Q 'i ^ Ek( Qi-l) XOR Cn 
to compute — M(Ci , Q i) l and 
to compute Qf =M( Q \ , Cj) , 

wherein: 

0 < i <= n, and 

is a hash function, and 

Pi denotes an i - th plaintext block of the n plaintext blocks, and 
Gf denotes an i - th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cy of block Cp 

selects a first argument of M if bit Py is not encrypted, and ^selects a second 

argimient of M if bit i^// is encrypted. 
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30. (Original) In apparatus for producing at least one plaintext block 
from at least one ciphertext block using a block cipher E and a key AT in a stream 

mode, wherein Pf denotes an i - th plaintext block of the plurality of plaintext 

blocks, and C/ denotes an i - th ciphertext block of the plurality of ciphertext 
blocks, an improvement comprising: 

a selector unit operative, for each bit Py of block Pf , to select 

Cy as an output if bit Cy is not encrypted. 

31. (New) A system for scrambling/descrambling packets, comprising a 
scrambling/descrambling device to scramble/descramble the packets based on an 
Initial Value and a Key, each of the packets having a must stay clear (MSG) 
section which must always stay in the clear, the Initial Value for each of the 
packets being a function of at least part of the MSG section of an associated one of 
the packets being processed. 

32. (New) The system according to claim 31, wherein the MSG section 
includes an adaptation field, the Initial Value being a function pf at least part of 
the adaptation field of the one packet being processed. 

33. (New) The system according to claim 32, wherein the Initial Value 
is a fimction of the data content of the adaptation field of the one packet being 
processed. 

34. ^ (New) A method for scrambling/descrambling packets, each of the 
packets having a must stay clear (MSG) section which must always stay in the 
clear, the method comprising: 

determining an Initial Value for each of the packets as a function of 
at least part of the MSG section of an associated one of the packets being 
processed; and 
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scrambling/descrambling the packets based on the Initial Value and 

a Key. 

35. (New) The method according to claim 34, wherein the MSG section 
includes an adaptation field, the determining including determining the Initial 
Value as a function of at least part of the adaptation field of the one packet being 
processed. 

36. (New) The method according to claim 35, wherein the determining 
includes determining the Initial Value as a function of the data content of the 
adaptation field of the one packet being processed. : r:;r :;r.: 

37. (New) Apparatus for producing at least one ciphertext block from at 
least one plaintext block using a block cipher E and a key K, the at least one 
plaintext block comprising n plaintext blocks, the at least one ciphertext block 
comprising n ciphertext blocks, wherein n is an integer greater than 0, the 
apparatus comprising: 

means for setting Qq equal to an initial value; and 

means for computing: 

Q, = EK(Q,.i)XORPi.^ 

Ci = M(Pi , Qi)y for each plaintext block of the n 

plaintext blocks, 
wherein: 

0 < i <= n, and 

Pf denotes an i - th plaintext block of the n plaintext blocks, and 
Cf denotes an i - th ciphertext block of the n ciphertext blocks, and 
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M is a selector function which, for each bit Cy of block C/, 
selects a first argument of M if bit Py is not to be encrypted, and selects a second 
argument of M if bit Py is to be encrypted. 

38. (New) Apparatus for producing at least one ciphertext block from at 

least one plaintext block using a block cipher a key and an initial value /F, 
the at least one plaintext block comprising n plaintext blocks, the at least one 
ciphertext block comprising n ciphertext blocks, wherein n is an integer greater 
..than^O,,the apparatos^ . , . — , 

means for computing IV' = M(Pj ,IV) ; 

means for computing Qq — : and 

means for computing: 

Q,=EK(Q,.i)XORPi,>^i 

Ci — M(Pi fQj), for each plaintext block of the n 

plaintext blocks, 
wherein: 

0 < i <= n, and 

if is a hash function, and 

Pi denotes an i - th plaintext block of the n plaintext blocks, and 
Ci denotes an i - th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cy of block Cp 

selects a first argument of M if bit Py is not to be encrypted, and selects a second 

argument of M if bit Py is to be encrypted. 
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39. (New) Apparatus for producing at least one plaintext block from at 
least one ciphertext block encrypted using a block cipher E and a key the at 
least one ciphertext block comprising n ciphertext blocks, the at least one plaintext 
block comprising n plaintext blocks, wherein n is an integer greater than 0, the 
apparatus comprising: 

means for setting Qq equal to an initial value; and 

means for computing: 

Q'i = EK(Qi.,)XORCt. 

p(=M(Ci, e:<>.;and . 

Qi —M( Q i , Cj)^ for each ciphertext block of the n 

ciphertext blocks, 
wherein: 

0 < i <= n, and 

Pf denotes an i - th plaintext block of the n plaintext blocks, and 
Cf denotes an i - th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cy of block 

selects a first argument of M if bit Py is not encrypted, and selects a second 

argument of M if bit Py is encrypted. 

40. (New) Apparatus for producing at least one plaintext block from at 
least one ciphertext block using a block cipher E and a key Ky the at least one 
ciphertext block comprising n ciphertext blocks, the at least one plaintext block 
comprising n plaintext blocks, wherein n is an integer greater than 0, the apparatus 
comprising: 

means for computing IV' = M(Pj JV) ; 
means for computing Qq ~ H(IV') ; and 
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means for computing: 

q;'-Ek(Q,.i)xorc,. 

Ql —M(Q \ y Ci), for each ciphertext block of the n 

ciphertext blocks, 
wherein: 

0 < i <= n, and 

His 3, hash function, and 

/^/ denotes an i - th plaintext block of the n plaintext blocks, and 
C| denotes an i - th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cy of block C/, 

selects a first argument of M if bit Pjj is not encrypted, and selects a second 

argument of M if bit is encrypted. 
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